Encrypt and validate the Cloudflare-to-origin connection
Goal
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Step-by-step
01
Create the certificate
Generate an Origin CA certificate for the exact hostnames served.
02
Protect the private key
Store it securely and never paste it into posts, support tickets, or screenshots.
03
Install it on the origin
Import the key and certificate into CloudPanel or the web server virtual host.
04
Select Full (strict)
Use Full (strict) only after the origin serves HTTPS with a valid matching certificate.
05
Troubleshoot 526 methodically
A 526 points to origin certificate validation: hostname, expiration, issuer, or origin TLS configuration.
Verify before moving on
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Troubleshooting
If a command or screen differs from the lesson, stop and verify the version you are using before forcing a change.
What you learned
You now understand the purpose of this part of the system and have a concrete result you can verify before continuing to the next lesson.